15 Commits

Author	SHA1	Message	Date
Laurent Cozic	a7dddaf2c4	Desktop: Allow attaching a file from the Markdown editor for HTML notes	2023-10-31 16:53:47 +00:00
Henry Heino	7c52c3e9a8	Desktop: Security: Disallow map and area tags (#8479)	2023-07-15 11:56:12 +01:00
Laurent Cozic	57b4198d2c	All: Security: Prevent XSS when passing specially encoded string to a link	2023-06-14 16:55:54 +01:00
Laurent Cozic	98440beffa	All: Fixes #8286: Allow certain HTML anchor tags	2023-06-08 15:18:46 +01:00
Laurent Cozic	9e90d9016d	All: Security: Prevent XSS by sanitizing certain HTML attributes	2023-05-19 11:00:31 +01:00
Laurent Cozic	ccec93eaa3	fix tests	2023-05-19 10:44:49 +01:00
Laurent Cozic	caf66068bf	Desktop, Mobile: Security: Disable SVG tag support in editor to prevent XSS	2023-05-17 16:00:24 +01:00
Laurent Cozic	19bdda25c6	Desktop: Security: Prevent XSS and potential RCE when using a special HTML tag	2023-05-11 14:17:37 +01:00
Laurent Cozic	b26bc9ed5f	Desktop: Security: Fixed possible XSS injection	2023-05-10 16:27:16 +01:00
Laurent Cozic	466d79e5d0	Chore: Fixed tests	2022-11-24 21:08:25 +01:00
Laurent Cozic	a2de167b95	All: Security: Fix XSS when a specially crafted string is passed to the renderer	2022-11-14 17:16:59 +00:00
Laurent Cozic	774c20772b	Security: Fixed disallowed tag XSS	2022-04-25 17:18:27 +01:00
Mayank Bondre	bc977bf43f	Desktop: Fixes #5803: Fixes alt text not appearing in html (#6017)	2022-01-18 11:11:21 +00:00
Roman Musin	e57e5d3b3f	All: Fixes #5245: Bump hightlight.js to v11.2 (#5278)	2021-08-12 22:07:57 +01:00
Laurent Cozic	cc07016b07	All: Use Lerna to manage monorepo	2020-11-05 16:58:23 +00:00